Given how common supply-chain vulnerabilities have become, I’m surprised more teams haven’t adopted Qubes. To compromise a Qubes setup you’d need a Xen sandbox escape which is possible but vastly more difficult than running a simple bash script from a post-install script.
I’ve daily-driven Qubes for about a year and it’s been easier than I expected. The main drawback is gaming because you need a second GPU and the GPU passthrough setup is annoying. I don't game much, so I use the CPU's integrated GPU for dom0 and reserve my dedicated GPU for general hardware-acceleration e.g. smoother youtube playback.
I can't see why anyone still chooses Claude. Codex outperforms it in most respects, and its quotas are about ten times larger. A $100 Codex plan gets me through the whole week with 6–12 hours of coding per day.
Anyway, I'm a hobby coder and, unlike you, I've really enjoyed AI-assisted development. I was never a strong developer, so coding always took me a long time, and my interest in projects faded quickly that forced me to relearn them from scratch after long breaks. With AI, I can actually finish projects, and my code quality has improved. GPT is a better developer than I am. Example: the first time I had it analyze a personal project, it found over 50 vulnerabilities.
I enjoy learning and understanding how code works, but since AI has largely automated typing code I've since then shifted my focus to higher level topics like software architecture and systems engineering. I am reading the book "designing data intensive applications" right now.
I believe compartmentalized operating systems like Qubes are the future for defending against these kinds of attacks.
Storing your sensitive data on a single bare-metal OS that constantly downloads and runs packages from unknown maintainers is like handing your house key out to a million people and hoping none of them misuse it.
I’ve daily-driven Qubes for about a year and it’s been easier than I expected. The main drawback is gaming because you need a second GPU and the GPU passthrough setup is annoying. I don't game much, so I use the CPU's integrated GPU for dom0 and reserve my dedicated GPU for general hardware-acceleration e.g. smoother youtube playback.